Privacy Policy

1. Introduction

SongCamp AI ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered music composition service.

2. Information We Collect

2.1 Information from Google OAuth

When you sign in using Google OAuth, we collect:

• Email address
• Full name
• Profile picture URL
• Google user ID

2.2 Usage Data

We automatically collect certain information when you use our Service:

• Music composition requests (genre, key, tempo, part selections)
• Credit usage and subscription plan information
• Timestamp of activities
• IP address and browser information
• Session data

2.3 Payment Information

Payment processing is handled by Lemon Squeezy. We do not store your credit card information. We only receive transaction confirmation and subscription status from Lemon Squeezy.

2.4 AI-Generated Content

We temporarily store MIDI files you generate for download purposes. These files are periodically cleaned and not used for AI training or shared with third parties.

3. How We Use Your Information

We use the collected information for:

• Providing and maintaining our Service
• User authentication and account management
• Processing subscription payments and managing credits
• Generating AI music compositions based on your requests
• Improving our Service and developing new features
• Communicating with you about updates, security alerts, and support
• Detecting and preventing fraud and abuse
• Complying with legal obligations

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers:

• Google LLC (United States) - Authentication services via Google OAuth. We share your email, name, and profile picture.
• Lemon Squeezy (United States) - Payment processing for subscriptions. We share transaction details and subscription information.
• Amazon Web Services (AWS) - Database hosting in Seoul, South Korea region. We store your account information and usage data.

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

5. Cookies and Tracking Technologies

We use session cookies to maintain your login state and provide a seamless experience. These cookies are essential for the Service to function and do not track you across other websites.

6. Data Security

We implement industry-standard security measures to protect your information:

• Secure HTTPS connections for all communications
• Encrypted database storage on AWS RDS MySQL
• Secure session management
• Regular security audits and updates
• Access controls and authentication mechanisms

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 GDPR Rights (EU/EEA Users)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (right to be forgotten)
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured format
• Objection: Object to certain data processing

7.2 CCPA Rights (California Users)

• Know what personal information is collected
• Know whether personal information is sold or disclosed
• Opt out of the sale of personal information
• Request deletion of personal information
• Non-discrimination for exercising your rights

To exercise these rights, please contact us at creativemindcokr@gmail.com.

8. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal data within 30 days, except where required by law to retain it longer.

9. Children's Privacy

Our Service is available to users 13 years of age and older. For users under 14 years of age in South Korea, parental or legal guardian consent is required in accordance with the Korean Personal Information Protection Act.

We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at creativemindcokr@gmail.com.

10. International Data Transfers

Your personal information may be transferred to and processed in countries other than your own. Below are the details of international data transfers:

10.1 Countries Where Your Data is Transferred

• United States: Google LLC (authentication), Lemon Squeezy (payment processing)
• South Korea: AWS RDS MySQL (primary database storage in Seoul region)

10.2 Data Items Transferred

• To Google (US): Email address, full name, profile picture URL
• To Lemon Squeezy (US): Email, subscription plan, transaction details
• To AWS (South Korea): All account and usage data

10.3 Safeguards

We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws, including:

• HTTPS encrypted transmission for all data transfers
• Service providers comply with applicable privacy laws (GDPR, CCPA, etc.)
• Contractual agreements with third parties requiring data protection

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Email notification to registered users
• Prominent notice on our Service
• Updating the "Last Updated" date at the top of this policy

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Company Name: CREATIVEMIND

Representatives: Jong-Hyun Lee, Chang-Wook Ahn

Business Registration Number: 424-87-00624

E-commerce Registration: 2021-수원영통-1196

Address: 513, 11-41, Simin-daero 327beon-gil, Dongan-gu, Anyang-si, Gyeonggi-do, Republic of Korea

Email: creativemindcokr@gmail.com

We will respond to your request within 30 days.